MEDIUM
Regular Expression Denial of Service (ReDoS)
Published Nov 5, 2020
5.3
MEDIUMCVSS 3.1
EPSS 1.57%
Description
This affects the package @absolunet/kafe before 3.2.10. It allows cause a denial of service when validating crafted invalid emails.
Affected products
Remediation
No remediation recorded yet.
Weaknesses (1)
References (6)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1102 Advisory
- https://github.com/absolunet/kafe/commit/c644c798bfcdc1b0bbb1f0ca59e2e2664ff3fdd0%23diff-f0f4b5b19ad46588ae9d7dc1889f681252b0698a4ead3a77b7c7d127ee657857 x_refsource_MISCBroken Link
- https://github.com/advisories/GHSA-hgpf-97c5-74fc Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2020-7761
- https://snyk.io/vuln/SNYK-JS-ABSOLUNETKAFE-1017403 x_refsource_MISCBroken Link
- https://www.npmjs.com/package/@absolunet/kafe
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner snyk
Published Nov 5, 2020
Updated Sep 17, 2024
Reserved Jan 21, 2020
Link CVE-2020-7761
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2021-1102 GHSA-HGPF-97C5-74FC Assigner snyk
Published Nov 5, 2020
Updated Sep 17, 2024
Exploited since n/a
Link EUVD-2021-1102